Ceph » Orchestrator

if the /var/log/ceph dir is owned by a group other than root and that group has write access, rotating the cephadm.log will fail with

error: skipping "/var/log/ceph/cephadm.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.

This is an issue because when installing the ceph-common package, it seems to create /var/log/ceph with owner/group ceph/ceph and write permissions for the group. This means a user who uses the cephadm preflight playbook (which installs ceph-common on the hosts) before running any cephadm commands (since cephadm will create the dir with owner/group root/root) will not be able to rotate this log.